Infrastructure as Code at Scale

Manage hundreds of workspaces across multiple repositories with one configuration. Use tag queries and parallel execution to scale operations efficiently.

Built for scale from day one

Core capabilities that power infrastructure at any scale

Tag Queries & Dynamic Config

Target workspaces dynamically and generate configurations at runtime

  • Boolean logic (AND/OR/NOT)
  • Auto-tag from directory structure
  • Runtime config generation

Centralized Configuration

One config file manages multiple repositories

  • Cross-repository policies
  • Organization-wide settings
  • Tag-based overrides

Parallel Execution

Run operations simultaneously with smart locking

  • Concurrent plan/apply
  • Smart resource locking
  • Dependency-aware execution

Layered Dependencies

Manage complex infrastructure layer relationships

  • Define layer relationships
  • Automatic execution order
  • Cross-layer state sharing

Drift Detection

Monitor and remediate drift at scale

  • Parallel drift checks
  • Scheduled scans
  • Bulk remediation

Policy Enforcement

Apply consistent policies everywhere

  • OPA policy integration
  • Workspace-specific rules
  • Automated compliance

See scale features in action

Watch how Terrateam handles infrastructure at scale through PR workflows

Update production infrastructure across regions #256
TT
terrateam commented
🔍 Detected 12 workspaces matching tag query:
environment:production AND region:(us-east-1 OR eu-west-1)
• prod/us-east-1/api
• prod/us-east-1/database
• prod/us-east-1/frontend
• prod/eu-west-1/api
• prod/eu-west-1/database
• prod/eu-west-1/frontend
... and 6 more
Running parallel plans (max_concurrent: 6)
Batch 1 (6 workspaces)✓ Complete
Batch 2 (6 workspaces)⟳ Running...
💡 Tip: Comment terrateam apply to apply all changes
developer commented
terrateam apply "environment:production AND region:us-east-1"
TT
terrateam commented
🚀 Applying 3 workspaces in us-east-1
prod/us-east-1/api✓ Applied
prod/us-east-1/database✓ Applied
prod/us-east-1/frontend⟳ Applying...

Dynamic configuration in action

Generate configurations at runtime based on your infrastructure patterns

Your Structure

prod/us-east-1/database/
prod/eu-west-1/api/
staging/us-west-2/frontend/

Auto-Generated Tags

environment:prodregion:us-east-1service:database

Parse directory structure for tags

# Parse path: prod/us-east-1/database
env, region, service = path.split('/')
dir_config.setdefault('tags', []).extend([
f'environment:{env}',
f'region:{region}',
f'service:{service}'
])

Use tags in queries

# Target workspaces with generated tags
apply_requirements:
checks:
- tag_query: "environment:prod AND region:us-east-1"
approved:
enabled: true
any_of_count: 2
- tag_query: "service:database"
approved:
enabled: true
any_of: ["dba-team"]

One configuration, multiple repositories

Manage all your infrastructure from a single configuration file

# .terrateam/config.yml
workflows:
- tag_query: "prod"
apply_requirements:
checks:
- approved:
enabled: true
any_of_count: 2

org/terrateam

api-service
database-infra
frontend-app

...and 100+ more repos

1

Config file

100+

Repositories

0

Manual updates

Real-world scale configuration

Powerful tag queries

# Production in specific regions
workflows:
- tag_query: "environment:production AND region:(us-east-1 OR eu-west-1)"
# Exclude sensitive workspaces
workflows:
- tag_query: "environment:staging AND NOT service:payments"

Scale configuration

# Managing 500+ workspaces
parallel_runs: 20
drift:
enabled: true
schedules:
production:
tag_query: "production"
schedule: daily
config_builder:
enabled: true
script: |
#!/usr/bin/env python3
# Auto-tag directories

Scale with confidence

20x

Parallel execution

500+

Workspaces managed

1

Central config

GitOps

Full automation

Ready to scale your infrastructure?

Join teams managing thousands of resources with Terrateam